1. Responsible for data processing and general principles
(1) APENCON GmbH, Grundstrasse 6, 78052 Villingen-Schwenningen, is, in accordance with Art. 4 No. 7 of the EU Data Protection Basic Regulation (“DSGVO”), responsible for the processing of personal data of you as a user of the web pages (“you”), available at https://apencon.com (hereinafter also “WEBSITE”).
(2) In the following we would like to inform you in detail about the processing of your personal data when you visit our WEBSITE (see no. 3) and when you contact us (see no. 4) within the scope of our duty to inform. Furthermore, we would like to inform you about the accompanying protective measures which we have also taken in technical and organisational terms on our WEBSITE (cf. no. 5), as well as your rights with regard to the processing of your personal data (cf. no. 6).
2. Processing of your personal data
(1) Personal data means any information relating to an identified or identifiable natural person. Your personal data therefore includes all data that can be directly or indirectly assigned to your person, such as your name, your address, your telephone number or your e-mail address.
(2) Personal data will be processed by us primarily only if and to the extent
– you have given us your consent to data processing for one or more specific purposes (Art. 6 para. 1 subpara. 1 letter a DSGVO);
– the processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request (Art. 6 para. 1 subpara. 1 letter b DSGVO);
– the data processing is necessary for the fulfilment of a legal obligation to which we are subject (Art. 6 para. 1 subpara. 1 letter c DSGVO), or
– the data processing is necessary for the protection of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Art. 6 para. 1 subpara. 1 letter f DSGVO)
(3) In the following provisions of this data protection declaration, we will explain to you on which of the legal bases listed in paragraph 2 or other legal bases we base the processing of your personal data in individual cases.
(4) In some cases we use external service providers (e.g. hosting providers, agencies) to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
3. Log files
(1) In connection with the call of our WEBSITE, we collect those of your data which your internet browser automatically transmits to our server.
The following data is collected:
– IP address of the requesting computer
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (concrete page)
– Access status/HTTP status code
– Amount of data transferred in each case
– Website from which the request comes
– Operating system and its interface
– Language and version of the browser software.
(2) This data is technically necessary for us to enable you to use and function our WEBSITE, in particular to display the WEBSITE and to guarantee the security and stability of the WEBSITE. We do not link this data with personal data of a specific natural person. A functioning website is in our legitimate interest. The legal basis is Art. 6 para. 1 subpara. 1 letter f DSGVO.
(3) We shall delete these data as soon as they are no longer required for the purpose of their collection. Your data including the IP address will be stored for up to seven days. After this period, the IP address will be stored in anonymous form. The temporary storage of the IP address is necessary to avert dangers.
(1) If you contact us, for example to provide us with your feedback, the contact data you provide (e.g. first and last name, e-mail address) will be processed in order to answer your enquiries and/or suggestions made via the contact form, by e-mail or in any other way. The processing of your data serves exclusively to process the contact and to prevent misuse and ensure the security of our information technology systems.
(2) The legal basis for processing the data is Art. 6 para. 1 subpara. 1 letter f DSGVO. If your message is aimed at the conclusion of a contract, the additional legal basis for the processing of your data is Art. 6 para. 1 subpara. 1 letter b DSGVO.
(3) Insofar as there are no legal or contractual retention periods to prevent the deletion of your personal data, we shall delete them as soon as they are no longer required for the purpose for which they were collected. This is the case when the conversation with you has ended. In principle, the conversation is over when it can be concluded from the circumstances that the matter in question has been conclusively clarified.
6. Your rights
(1) With regard to the processing of personal data concerning you, you are entitled to the rights listed below under letters a – h, subject to the legal requirements. Please contact us for this purpose. You will find the contact details under point 1.
a) Right to information
In accordance with Art. 15 DSGVO, you can request a confirmation from us as to whether personal data concerning you is being processed by us. In this case, you have the right, pursuant to Art. 15 para. 1 DSGVO, to be informed about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom we have disclosed or will disclose the personal data, the planned storage period or the criteria for determining the storage period, the existence of a right to correct or delete your personal data and to limit processing or object to processing, the existence of a right of appeal to a supervisory authority, the origin of the data if we have not collected your data from you, the existence of automated decision making including profiling, and pursuant to Art. 15 paragraph 2 DSGVO the right to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO in connection with the transfer of personal data to third countries.
b) Right of rectification
In accordance with Art. 16 DSGVO, you can demand that we correct your personal data without delay and/or, taking into account the purpose of the processing, complete it if your data is incorrect or incomplete.
c) Right to deletion
In accordance with Art. 17 DSGVO, you can demand that we delete your personal data without delay, provided there is a reason in accordance with Art. 17 Para. 1 letters a-f DSGVO. However, the right to delete your personal data does not apply in particular if processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (Art. 17 para. 3 DSGVO).
d) Right to restrict processing
You can demand that we restrict the processing of your personal data in accordance with Art. 18 DSGVO as long as we verify the accuracy of your data that you dispute, if you refuse to delete your data because of unlawful processing and demand instead that we restrict the use of your data, if you need your data to assert, exercise or defend legal claims, or if you have lodged an objection to the processing, as long as it is not yet clear whether our legitimate reasons outweigh the objection.
e) Right to information
In accordance with Art. 19 DSGVO, we notify all recipients to whom your personal data has been disclosed of any correction or deletion of your personal data or any restriction on its processing in accordance with Art. 16, 17 para. 1 and 18 DSGVO, unless this proves impossible or involves disproportionate effort. According to art. 19 S. 2 DSGVO, you have the right to be informed about these recipients upon request.
f) Right to data transferability
In accordance with Art. 20 DSGVO, you have the right to receive the personal data you have provided us with in a structured, common and machine-readable format and to transfer this data to another person responsible, provided that the further requirements of Art. 20 DSGVO are met, in particular that this is technically feasible.
g) Right of appeal
Insofar as we base the processing of your personal data on the legitimate interests pursuant to Art. 6 para. 1 subpara. 1 letter f DSGVO, you may object to the processing pursuant to Art. 21 DSGVO. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you, which is described by us in the above description of the offers. In the event of such an objection, we request that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and, in accordance with Art. 21 Paragraph 1 S. 2 DSGVO, we will either stop processing the personal data or prove to you our compelling reasons for processing worthy of protection, which outweigh your interests, rights and freedoms. Further processing is also reserved if the processing serves to assert, exercise or defend legal claims.
In accordance with Art. 21 Para. 2 DSGVO, you can of course object at any time to the processing of your personal data for the purposes of advertising and profiling, insofar as it is connected with direct advertising.
h) Right to withdraw consent
(1)In accordance with Art. 7 para. 3 DSGVO, you have the right to revoke any data protection consent you may have given us at any time with effect for the future. However, this does not affect the legality of the processing, which has taken place on the basis of your consent up to the time of the revocation.
(2) If you are of the opinion that the processing of your data violates data protection regulations, you are also entitled to complain to a supervisory authority in accordance with Art. 77 DSGVO. Please contact a supervisory authority in the Member State in which you are resident, your place of work or the location of the potential infringement.
We reserve the right to change these data protection regulations at any time with effect for the future. A current version is available on our WEBSITE. Please visit the WEBSITE regularly and inform yourself about the applicable data protection regulations.
As of April 2020